CVE-2026-72208
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfs_ea_lookup and ntfs_listxattr, this verifies that there is enough space in the EA entry before accessing the next_entry_offset field of the EA entry.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72208
EUVD
EUVD-2026-58966

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ntfs ntfs *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a missing bounds check in the NTFS file system driver. Specifically, in functions ntfs_ea_lookup and ntfs_listxattr, the code attempts to access the next_entry_offset field of an EA (Extended Attribute) entry without first verifying there is sufficient space. This could lead to out-of-bounds memory access.

Impact Analysis

This vulnerability may allow an attacker to cause a denial of service (system crash) or potentially execute arbitrary code with kernel privileges. It affects systems using the NTFS file system, which could include desktops, servers, or cloud environments running affected Linux kernel versions.

Mitigation Strategies

Update your Linux kernel to the latest patched version to resolve the ntfs EA entry bounds check issue. Monitor vendor advisories for kernel updates and apply them promptly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72208. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart